Static task
static1
Behavioral task
behavioral1
Sample
10e416604aa227bc1ed2219be02d9886.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
10e416604aa227bc1ed2219be02d9886.exe
Resource
win10v2004-20231222-en
General
-
Target
10e416604aa227bc1ed2219be02d9886
-
Size
88KB
-
MD5
10e416604aa227bc1ed2219be02d9886
-
SHA1
d5e990b50b233a42d12e06fa8f73dc0aee570490
-
SHA256
6b1832b242e7a7bb76829b4a655465718d6845a07f4c0d3e67fd58ad50bfa902
-
SHA512
e9e16c1bc1bce411a5b9cf2e6b54cef246c0c608135f5921f0356993531ae53a4559a77a86cf05e54a2b17da35caa988cda6ca04d92c5a7dc1f9c4bc6b1e447f
-
SSDEEP
1536:ATTySdXngxaIGi7Q3cYq5XEk5ETPjiLMkxqegLHt2Al3jAwhZCVNbRNc:APdht4pY2E5QJgLN53F3CPbRNc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 10e416604aa227bc1ed2219be02d9886
Files
-
10e416604aa227bc1ed2219be02d9886.exe windows:4 windows x86 arch:x86
17ac109a81cdf9293e3b4ba4cadcde27
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SuspendThread
GetDriveTypeW
FindClose
MulDiv
LoadResource
CreateEventW
SizeofResource
DuplicateHandle
FindNextChangeNotification
SetWaitableTimer
VirtualAlloc
CancelWaitableTimer
ResumeThread
GlobalUnlock
GetTickCount
GetFileAttributesW
GetLocalTime
DeleteFileW
LoadLibraryA
Sleep
SetThreadPriority
WideCharToMultiByte
GetCurrentThreadId
QueryDosDeviceW
GetLogicalDrives
LockResource
FileTimeToSystemTime
GlobalFree
SetCurrentDirectoryW
WritePrivateProfileStringW
TerminateThread
GetProcAddress
FreeResource
GetLastError
GetCurrentThread
user32
DialogBoxParamW
GetDlgItem
FillRect
GetKeyState
DispatchMessageW
RedrawWindow
LoadStringW
CreateWindowExW
SetForegroundWindow
PostThreadMessageW
DrawTextW
DefWindowProcW
GetMessageW
LoadIconW
OffsetRect
SendMessageW
UpdateWindow
GetWindowTextW
GetClassNameW
GetSysColor
LoadImageW
SetWindowPos
ReleaseDC
ReleaseCapture
PostQuitMessage
gdi32
SetMapMode
StretchBlt
SetBkMode
GetMapMode
SetTextColor
CreateICW
CreateBitmap
CreateRoundRectRgn
SetDIBits
CreateCompatibleDC
advapi32
SetSecurityDescriptorDacl
StartServiceW
RegCreateKeyExW
RegDeleteValueW
RegCloseKey
RegOpenKeyExW
InitializeSecurityDescriptor
RegQueryValueExW
RegSetValueExW
Sections
.gfqx Size: 76KB - Virtual size: 74KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.qlcby Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.kykdza Size: 4KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE